Libraries tagged by code analysis

A PHPStan extension that checks your code for security vulnerabilities

Go to Download

A queryable code graph for Laravel applications: dependency injection, container bindings, routes, views, Eloquent relations and documentation, connected the way generic AST tools cannot see.

Go to Download

CLI tool for measuring PHP cognitive complexity (ISO SonarQube) — integrates with CI/CD pipelines and Husky pre-commit hooks

Go to Download

Microweber security scanner is a php antimalware/antivirus scanner script written in php for scan your project.

Go to Download

Framework-agnostic PHP library for automatically fixing PHPStan errors using static analysis

Go to Download

Dependency health your whole team can understand: cycles and coupling in PHP projects, in a report anyone can read.

Go to Download

Analyze and understand large Laravel applications through architecture visualization and dead code detection.

Go to Download

Knowledge graph builder and query tool for PHP projects, exposed to AI assistants via CLI and MCP

Go to Download

PHP Coding Standard rules we use at Eolica Digital

Go to Download

Rule for PHPStan that detects when production code depends on classes from Composer dev-dependencies, with flexible configuration to selectively allow certain classes or namespaces where needed.

Go to Download

🔎 PHP Extensions Finder: scans your code and lists the PHP extensions it needs, ready to paste into composer.json as ext-* requirements.

Go to Download

Laravel-aware SCIP index generation for Laravel applications.

Go to Download

Laravel package that scans applications (including Livewire) for security vulnerabilities, reports issues with severity levels, and provides remediation guidance and optional automated fixes.

Go to Download

Opinionated Rector rules for PHP — strict-assertion enforcement, no @phpstan-ignore, no env-checks in src, no superglobals, PSR Clock requirement, no direct DB / event-dispatch / assert() inside functional tests, and a comment-stripper that keeps only PHPStan tag blocks.

Go to Download

Teaches PHPStan's dead code detector to read the wiring Laravel calls and PHP cannot see: Livewire components and their Blade templates, Eloquent enum casts, gate abilities, and package contracts.

Go to Download